mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-07 03:15:56 +00:00
With AUTO_BUILD_ALIASES enabled, current_play_redirect_domains adds <entity>.<DOMAIN_PRIMARY> as a redirect source for every application whose canonical domain differs. web-opt-rdr-domains then asks the tls and cert lookups about each source, but resolve_term only knew the domains mapping and applications[*].domains, so the Keycloak stage on echoserver stopped with "tls: domain 'funkwhale.infinito.nexus' not found". redirect_targets() turns CURRENT_PLAY_REDIRECT_DOMAINS into a source to target map, and resolve_term falls back to it, one hop, only where it raised before, so every term that resolved keeps its answer. The tls and cert lookups pass the map. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Certificate & TLS Unit Tests 🔐
Unit tests for the top-level certificate and TLS helper modules in utils/: cert_utils.py (wildcard/exact match logic, newest-certificate selection) and tls_common.py (flavor handling, SAN overrides, domain normalisation).
Tests in this directory MUST only cover the pure-function behaviour of utils.cert_utils and utils.tls_common. Lookup-plugin integration that depends on these modules MUST live under tests/unit/python/plugins/lookup/.
For framework and make test-unit usage see unit.md.